CompTIA Security+ Bootcamp: Your preparation course for the most popular cyber security certification in the world!
About This Video
In Detail
This course is designed to help prepare you for the CompTIA Security+ (SY0-501) certification exam and covers the six domains for the Security+ …
CompTIA Security+ Bootcamp: Your preparation course for the most popular cyber security certification in the world!
About This Video
In Detail
This course is designed to help prepare you for the CompTIA Security+ (SY0-501) certification exam and covers the six domains for the Security+ (SY0-501) certification exam:
You will learn the fundamentals of cybersecurity and gain experience in the configuration, management, and troubleshooting of common wired and wireless networks.
Who this book is for
Students who want to pass the CompTIA Security+ certification exam. Students wanting to learn the terminology and nomenclature of computer security. Students seeking a career in cybersecurity.
Chapter 1 : Overview of Security
Welcome
Overview of Security
CIA Triad
AAA of Security
Security Threats
Mitigating Threats
Hackers
Threat Actors
Chapter 2 : Malware
Malware
Viruses
Worms
Trojans
Demo: Viruses and Trojans
Ransomware
Spyware
Rootkits
Spam
Summary of Malware
Chapter 3 : Malware Infections
Malware Infections
Common Delivery Methods
Demo: Phishing
Botnets and Zombies
Active Interception and Privilege Escalation
Demo: Privilege Escalation
Backdoors and Logic Bombs
Symptoms of Infection
Removing Malware
Preventing Malware
Chapter 4 : Security Applications and Devices
Security Applications and Devices
Software Firewalls
Demo: Software Firewalls
IDS
Pop-up Blockers
Data Loss Prevention (DLP)
Securing the BIOS
Securing Storage Devices
Disk Encryption
Chapter 5 : Mobile Device Security
Mobile Device Security
Securing Wireless Devices
Mobile Malware
SIM Cloning ID Theft
Bluetooth Attacks
Mobile Device Theft
Security of Apps
BYOD
Hardening Mobile Devices
Chapter 6 : Hardening
Hardening
Unnecessary Applications
Restricting Applications
Demo: Unnecessary Services
Trusted Operating System
Updates and Patches
Patch Management
Group Policies
Demo: Group Policies
File Systems and Hard Drives
Chapter 7 : Virtualization
Virtualization
Hypervisors
Demo: How to create a VM
Threats to VMs
Securing VMs
Demo: Securing VMs
Chapter 8 : Application Security
Application Security
Web Browser Security
Web Browser Concerns
Demo: Web Browser Configuration
Securing Applications
Chapter 9 : Secure Software Development
Software Development
SDLC Principles
Testing Methods
Software Vulnerabilities and Exploits
Buffer Overflows
Demo: Buffer Overflow Attack
XSS and XSRF
SQL Injection
Demo: SQL Injection
Chapter 10 : Network Design
Network Security
The OSI Model
Switches
Routers
Network Zones
Network Access Control
VLANs
Subnetting
Network Address Translation
Telephony
Chapter 11 : Perimeter Security
Perimeter Security
Firewalls
Demo: SOHO Firewall
Proxy Servers
Honeypots and Honeynets
Data Loss Prevention
NIDS and NIPS
Unified Threat Management
Chapter 12 : Cloud Security
Cloud Computing
Cloud Types
As a Service
Cloud Security
Defending Servers
Chapter 13 : Network Attacks
Network Attacks
Ports and Protocols
Memorization of Ports
Unnecessary Ports
Denial of Service
DDoS
Stopping a DDoS
Spoofing
Hijacking
Replay Attack
Demo: Null Sessions
Transitive Attacks
DNS Attacks
ARP Poisoning
Chapter 14 : Securing Networks
Securing Networks
Securing Network Devices
Securing Network Media
Securing WiFi Devices
Wireless Encryption
Wireless Access Points
Wireless Attacks
Demo: Wireless Attack
Other Wireless Technologies
Chapter 15 : Physical Security
Physical Security
Surveillance
Door Locks
Demo: Lock Picking
Biometric Readers
Chapter 16 : Facilities Security
Facilities Security
Fire Suppression
HVAC
Shielding
Vehicles
Chapter 17 : Authentication
Authentication
Authentication Models
802.1x
LDAP and Kerberos
Remote Desktop Services
Remote Access Service
VPN
RADIUS vs TACACS+
Authentication Summary
Chapter 18 : Access Control
Access Control
Access Control Models
Best Practices
Users and Groups
Permissions
Usernames and Passwords
Demo: Policies
User Account Control
Chapter 19 : Risk Assessments
Risk Assessments
Qualitative Risk
Quantitative Risk
Methodologies
Security Controls
Vulnerability Management
Penetration Testing
OVAL
Vulnerability Assessments
Demo: Nmap Scanning
Demo: Vulnerability Scanning
Password Analysis
Demo: Password Cracking
Chapter 20 : Monitoring and Auditing
Monitoring Types
Performance Baselining
Protocol Analyzers
SNMP
Demo: Analytical Tools
Auditing
Demo: Auditing Files
Logging
Log Files
SIEM
Chapter 21 : Cryptography
Cryptography
Symmetric vs Asymmetric
Symmetric Algorithms
Public Key Cryptography
Asymmetric Algorithms
Pretty Good Privacy
Key Management
One-Time Pad
Demo: Steganography
Hashing
Demo: Hashing
Hashing Attacks
Increasing Hash Security
Chapter 22 : Public Key Infrastructure
Public Key Infrastructure
Digital Certificates
Demo: Certificates
Certificate Authorities
Web of Trust
Chapter 23 : Security Protocols
Security Protocols
S/MIME
SSL and TLS
SSH
VPN Protocols
Demo: Setting up a VPN
Chapter 24 : Planning for the Worst
Planning for the Worst
Redundant Power
Backup Power
Data Redundancy
Demo: RAIDs
Network Redundancy
Server Redundancy
Redundant Sites
Data Backup
Tape Rotation
Disaster Recovery Plan
Chapter 25 : Social Engineering
Social Engineering
Demo: Pretexting
Insider Threat
Phishing
More Social Engineering
User Education
Chapter 26 : Policies and Procedures
Policies and Procedures
Data Classifications
PII and PHI
Security Policies
User Education
Vendor Relationships
Disposal Policies
Incident Response Procedures
Data Collection Procedures
Demo: Disk Imaging
IT Security Frameworks
Chapter 27 : Conclusion
Conclusion
Exam Tricks